DNS Leak Test
Check if your DNS queries are leaking outside your VPN
Tests run in your browser. No data is stored.
What Is a DNS Leak?
Every time you visit a website, your device sends a DNS (Domain Name System) query to translate the domain name (like google.com) into an IP address that computers can understand. Normally, these queries go to your Internet Service Provider's (ISP's) DNS servers.
When you connect to a VPN, all your traffic — including DNS queries — should be routed through the encrypted VPN tunnel to the VPN provider's own DNS servers. A DNS leak occurs when your DNS queries escape the VPN tunnel and are sent to your ISP's DNS servers instead. This means your ISP can see every website you visit, even though your other traffic is encrypted.
DNS leaks are one of the most common ways VPNs fail to protect your privacy. They can happen silently — you might think you are fully protected while your browsing history is being exposed. Common causes include misconfigured VPN software, operating system DNS settings overriding VPN settings, IPv6 DNS queries bypassing the tunnel, and VPN connection drops without a kill switch.
This is why regularly testing for DNS leaks is essential. Our DNS leak test checks which DNS servers are actually handling your queries, so you can verify whether your VPN is truly protecting your privacy.
How to Fix DNS Leaks
Enable DNS Leak Protection in Your VPN
Most quality VPN apps have a DNS leak protection toggle in their settings. Enable it to force all DNS queries through the VPN tunnel. This is the easiest and most effective fix.
Use a VPN with a Kill Switch
A kill switch blocks all internet traffic when the VPN connection drops, preventing DNS queries from leaking through your regular connection during momentary disconnects.
Manually Set Secure DNS Servers
If your VPN doesn't handle DNS properly, manually configure your device to use privacy-focused DNS servers like Cloudflare (1.1.1.1), Google (8.8.8.8), or Quad9 (9.9.9.9). This prevents your ISP's DNS from being used as a fallback.
Disable IPv6 (If Your VPN Doesn't Support It)
Many VPNs only tunnel IPv4 traffic, letting IPv6 DNS queries leak. Disable IPv6 in your operating system's network settings, or switch to a VPN that fully supports IPv6 tunneling.
Frequently Asked Questions
What is a DNS leak?
A DNS leak occurs when your DNS queries are sent outside your VPN tunnel to your ISP's DNS servers instead of the VPN's DNS servers. This exposes your browsing activity to your ISP even when using a VPN.
How do I fix a DNS leak?
Enable DNS leak protection in your VPN settings, use a VPN with built-in DNS leak protection, or manually configure your device to use secure DNS servers like 1.1.1.1 or 8.8.8.8.
Does a DNS leak reveal my identity?
A DNS leak reveals your browsing activity and real location to your ISP, but not your exact identity. However, your ISP can link this activity to your account.
How often should I test for DNS leaks?
Test whenever you connect to a new network, after VPN updates, or periodically every few weeks to ensure your VPN's DNS protection is working correctly.
More Tools